Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31302e302f32332d3233203d3e20323639363938.roa
File:                     34352e3139312e31302e302f32332d3233203d3e20323639363938.roa (raw, json)
Hash identifier:          i1LFjDleQqoAGjz6MvN6wpPw4uQ4dlQvDkJaxBKU9BU=
Subject key identifier:   8D:CB:69:38:07:32:AC:13:AF:D1:2A:B0:28:80:EC:BC:08:FF:51:EB
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       65087699EDDB19E4058CFED8F2B9371E1B25FE77
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31302e302f32332d3233203d3e20323639363938.roa
Signing time:             Thu 06 Mar 2025 05:11:54 +0000
ROA not before:           Thu 06 Mar 2025 05:06:54 +0000
ROA not after:            Thu 05 Mar 2026 05:11:54 +0000
asID:                     269698
IP address blocks:        45.191.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:08:76:99:ed:db:19:e4:05:8c:fe:d8:f2:b9:37:1e:1b:25:fe:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Mar  6 05:06:54 2025 GMT
            Not After : Mar  5 05:11:54 2026 GMT
        Subject: CN=8DCB69380732AC13AFD12AB02880ECBC08FF51EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:9c:7c:c0:34:6e:d3:16:d1:65:1f:04:74:
                    c8:a5:50:60:29:b1:8c:d7:8f:76:ad:bb:df:38:d9:
                    07:7b:bb:1c:7b:de:dc:2f:e3:fb:24:e7:00:ea:51:
                    0d:54:15:2f:27:36:6a:1b:f5:a6:28:4f:70:9d:a7:
                    a6:e8:be:e8:0e:46:7c:8c:ec:43:73:36:8f:ac:88:
                    37:e5:64:ac:2f:b5:e8:7e:a1:fe:e9:27:f9:45:20:
                    82:39:b6:29:f9:e8:7c:ae:cb:4c:99:15:5f:14:9b:
                    c0:d9:b8:7a:71:45:bf:8e:da:d2:0b:15:bc:09:00:
                    07:bf:f4:17:ed:2d:ce:5c:61:ed:9d:1b:59:b5:82:
                    b4:5d:c6:77:f3:e0:7a:08:87:7a:aa:94:1b:97:66:
                    5a:3c:6d:72:ca:5c:e8:dd:08:c8:fa:0f:c3:42:26:
                    c0:fc:60:d0:49:f2:e6:e8:d3:c3:70:3e:9e:ad:17:
                    23:7d:ef:e8:70:1d:38:0d:9e:c5:80:1d:45:5c:24:
                    68:28:a8:ca:c5:5f:54:45:a7:ba:00:3b:0b:b4:b2:
                    0d:27:58:33:da:8b:cc:7a:87:bd:9b:25:ea:c4:b0:
                    a5:37:08:00:43:0b:7c:64:46:d0:bb:c5:75:47:44:
                    d9:90:3a:eb:53:2f:04:c8:cb:6f:d9:99:2f:c4:83:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CB:69:38:07:32:AC:13:AF:D1:2A:B0:28:80:EC:BC:08:FF:51:EB
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31302e302f32332d3233203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:6d:79:62:c8:13:16:f6:c9:99:78:f7:61:48:ab:df:43:4f:
         9b:ce:df:ba:d1:cf:90:b9:79:69:c0:f2:c7:ac:bd:f9:9d:1d:
         e5:80:b4:98:a4:db:f4:a0:c3:e3:32:0b:6b:d2:4e:49:7e:71:
         a7:99:8b:99:81:10:a1:10:3b:0c:80:2a:15:93:b9:b0:27:0e:
         f2:86:eb:40:5a:b0:7e:14:e5:8a:4e:e6:01:3e:a0:f7:93:37:
         98:0b:a6:94:1e:9c:7b:3d:bc:4f:64:5e:5f:27:90:01:b1:b0:
         be:27:09:42:8a:3f:bc:9b:32:cb:ee:c2:39:67:b2:20:4f:98:
         e7:b0:5b:84:90:f8:c9:f2:af:59:26:5a:6c:9f:b1:63:55:85:
         29:99:b4:4e:67:7f:2f:3c:74:08:0d:9a:7d:4d:0e:cb:3e:27:
         e2:7d:b2:4a:b7:9a:b2:ae:98:32:6e:8a:f3:ba:ce:66:21:9d:
         a4:a0:c5:e5:8d:bb:0c:db:6c:d2:56:2a:58:8a:07:14:ad:98:
         c9:16:04:d4:7d:00:87:4d:be:66:77:90:62:e6:20:17:99:71:
         68:88:79:36:30:1d:a4:2c:2d:f3:eb:65:61:58:1c:5d:c5:d2:
         1e:c8:01:07:4b:4c:35:43:80:3f:36:a8:85:36:b7:18:3d:2c:
         15:56:e6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:48 2025 by rpki-client on console.sobornost.net